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ABSTRACT 


Application of multifunction display and control systems to the NASA Orbiter 
spacecraft offers the potential for reducing crew workload and improving the 
presentation of system status and operational data to the crew. In this report, a 
design concept is presented for the application of a multifunction display and control 
system (MFDCS) to the Orbital Maneuvering System and Electrical Power Distribution 
and Control System on the Orbiter spacecraft. The MFDCS would provide the 
capability for automation of procedures, fault prioritization and software 
reconfiguration of the MFDCS data base. The MFDCS would operate as a stand-alone 
processor to minimize the impact on the current Orbiter software. Supervisory crew 
command of all current functions would be retained through the use of several 
operating modes in the system. This report describes both the design concept and the 
processes followed in defining the concept. 
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1.0 INTRODUCTION 

This report describes the recommended design concept developed during performance 
of NASA contract NAS9- 16445, "Development of Preliminary Design Concept for 
Multifunction Display and Control System for Orbiter Crew Station." 

1.1 PURPOSE 

The purpose of this report is to summarize the work carried out in Task 1 (Survey of 
Existing Technology', Task 2 (Application of Technology) and Task 3 (Concept 
Analysis) and to describe a recommended design concept for a Multifunction Display 
and Control System (MFDCS) for the Orbiter. The design concept presented as part of 
Task 4 (Design Concept Recommendation) is based on the results of the previous three 
tasks. 

1.2 SCOPE 

The design concept recommended in this report is the result of considerations of 
hardware, software and human engineering related to the development of an MFDCS 
to the Orbiter spacecraft. System examples are specifically directed towards and 
illustrated by the Orbital Maneuvering System (OMS) and the Electrical Power 
Distribution and Control System (EPDCS). However, the design concept was developed 
to represent a potential application to a larger number of Orbiter systems. The 
greatest potential of the MFDCS can be realized through application to the Orbiter 
display and control system in general, however, in keeping with the study goals of 
minimizing the effect of the proposed design recommendation on Orbiter hardware and 
software, the recommended design can operate with minimal interface to the current 
system. 

1.3 DESIGN CONCEPT RECOMMENDATION PROCESS 

Results of testing and feasibility studies conducted during Task 3 indicated a preferred 
set of hardware/software choices as well as an access schema fulfilling the major 
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design goals of the MFDCS. These included provisions for checklist and procedure 
integration into the MFDCS, automation of the proceoures and checklists and 
presentation of system status at a number of levels of detail. Hardware and software 
considerations were directed toward provision of adequate display parameters such as 
size, resolution and luminance and provision of a software operating system which 
would provide minimal host computer (General Purpose Computer (GPC)) impact and a 
high degree of flexibility for varying the degree of automation and the logic tree and 
legends associated with the multifunction keyboards and displays. A considerable 
degree of automation was found to be necessary in order to minimize the number of 
required crew inputs. In addition to the functional aspects of the system, the 
hardware choices were also analyzed for compatibility with the goals of minimizing 
the weight, power and cooling requirements of the system. 

The results of Task 3 were combined with the comments and discussion of the Task 3 
review to arrive at the final design concept recommendation. This effort includes 
specific choices of potential hardware to implement the design and a description of a 
possible packaging format for use in an Orbiter simulator. 

1.4 SUMMARY 

The study has been conducted as a series of four consecutive tasks. During the first 
task (Survey of Technology) the current and projected future status of multifunction 
display and control technology was assessed with respect to both hardware and human 
engineering (reference 1-1). Areas of important changes were discussed. These 
included the introduction of color CRTs for aviation instrumentation displays and the 
growing development o t flat panel displays such as dot matrix arrays using LED's, 
liquid crystal displays (LCD), vacuum flourescence (VF), plasma, and thin film 
electroluminescence (TFEL). Another rapialy changing area was that of processing 
and memory where increasing processor speed and greatly increased chip component 
densities in both processor and memories permit a high degree of storage and 
intelligence in a small scale display and control system. Developments in control 
devices were also surveyed. Prominent among these were multifunction programmable 
legend switches, touch panel overlays and /oice recognition and entry systems. All 
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these developments were reviewed with respect to the constraints of operation in the 
Orbiter environment and the goals of the study. 

Human engineering factors associated with multifunction display and control systems 
were reviewed with emphasis being given to the development process for the access 
schema which is associated with each system. Current systems in use and under 
development were surveyed and some of the design processes followed were 
illustrated. 

The second task (Application of Technology) considered the application of 
multifunction display and control technology to the Orbiter OMS and EPDCS as 
particular system examples (reference 1-2). This included a discussion of the study 
goals, a functional analysis of the OMS and EPDCS, assessment of human factors and 
hardware iequirements imposed by the Orbiter mission and the development of several 
design concepts applicable as MFDCS designs. The functional analysis provided a 
detailed analysis of the opsration of the OMS system, a listing of OMS control 
functions and formulation of a preliminary access schema for the OMS and EPDCS. A 
number of possible applications of the display and control hardware technology to the 
Orbiter systems were considered. Concepts developed ranged from a multifunction 
keyboard as both a display and control device to the use of a multifunction keyboard, a 
flat panel checklist display and a color CRT for the display of graphic system 
diagrams. The latter concept was suggested for further development. The initial 
access schema included provision for both manual operation of all the EPDCS and OMS 
control functions as well as incorporation of checklists. 

Task 3 (Concept Analysis) was directed towards the analysis and feasibility testing of 
implementations of the design concept selected in Task 2. Included in the analysis was 
a more comolete functional analysis of the EPDCS, the development of an access 
schema offering automation of checklists and procedures and presentation of the 
analysis and feasibility testing results (reference 1-3). 

Functional analysis of the EPDCS and discussions with NASA-35C personnel indicated 
a major potential problem with the time constraints in handling malfunction 


3 

D ISO-2721 5-1 


TH« 


procedures. This is particularly true during ascent where the available time from main 
engine cut-off until execution of the first OMS burn is limited to 2 minutes if orbit s 
to be achieved. The EPDC5 procedures associated with malfunctions typically involve 
components in a number of Orbiter systems. 

Automation of crew procedures and checklists was included in the access schema to 
improve the operating speed of the MFDCS. Both automatic and semi-automatic 
modes were included while retaining a manual mode capability for accessing the 
complete current set of Orbiter control functions. 

Analysis and feasibility testing was conducted to correlate the requirements and 
options for implementation of the system with respect to hardware, software and 
human engineering considerations. Results of the analysis and testing included 
determinations of display size, resolution and color, character size and font style, 
hardware/software operating speed, display power requirements for different display 
types, and interfacing between the components of the MFDCS. 

The results of Task 4 (Design Concept Recommendation) are included in this report. 
The results of Tasks 1 through 3 are summarized in greater detail in Section 2. The 
logical structure and access schema of the recommended MFDCS design are described 
in Section 3. Four major operating modes are implemented in the design. These are: 
1) Normal Operation, in which the activation of procedures may be carried out 
automatically or semi-automatically, 2) System Status, in which the various systems 
under MFDCS control are monitored for indications of malfunction, 3) Individual 
Switch and Control Function Access, in which the current set of switches and control 
functions may be accessed, and 4) Caution and Warning Handling, in which 
heirarchially ordered malfunctions or warnings are presented with suggested 
procedures for crew action. The access schema offers a high degree of flexibility in 
crew responses while improving potential operating speed and preserving crew 
command supervision. A specific example of MFDCS operation and some optional 
system provisions are also included in Section 3. 
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Section 4 descries the recommended approach for MFDCS hardware and software. 
Basically the hardware uses a 16 bit control microprocessor and a multibus structure 
to link the display and I/O modules of the system. Three displays are included. These 
are: 1) a multifunction keyboard made up of 2S programmable legend switches, 2) a 
flat panel medium resolution display for checklist and procedure presentation, and 3) a 
high resolution stroke/raster color CRT display for the presentation of system 
schematic diagrams and procedure menus. The displays include dedicated 
microprocessors to improve operating speed and MFDCS modularity. The system 
software is divided into two major portions. The first is the background operating 
system which is independent of the specific data base used for a given mission. The 
operating system handles communication between the Orbiter General Purpose 
Computers (CPC) and the MFDCS modules, MFDCS initialization and command 
processing between modules. The second major software portion is the data base 
which includes the logical structure for accessing th » procedures and control functions 
and the stored legends and display formats. The data bases can be specifically tailored 
for particular missions and loaded into the system as required. Also included in 
Sect'on 4 is a discussion of future options, associated with MFDCS hardware choices, 
and a subsection on system flexibility. 

Section 5 discusses some additional considerations pertinent to the MFDCS. These 
include redundancy and reliability, automation and mission scenarios. In Section 6 
some of the aspects of the further development process for the MFDCS and study 
conclusions are presented. References are included in Section 7. 
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2.0 STUDY TASK RESULTS AND CONCLUSIONS 

The results and conclusions of the preceding stud/ tasks are described briefly in the 
following subsections. These results and conclusions form the basis for the design 
recommendations made in this report. 

2.1 TASK 1 (SURVEY OF TECHNOLOGY) 

During Task 1 efforts were directed towards understanding the present Orbiter system 
and towards a survey of the present and project*.! future status of multifunction 
display and control technology. The OMS aid EPDCS were selected as the particular 
two separate Orbiter systems for detailed application of MFDCS concepts, although 
the concepts developed are applicable to the Orbiter systems in general. Literature 
provided by NA5A-3SC and discussions with NASA personnel provided the majority of 
the detailed background on the Orbiter configuration and operation. The literLtu.* 
consisted primarily of training manuals and cockpit layout drawings available to the 
Orbiter crew. Added to this was an opportunity to inspect the Orbiter simulators and 
discuss the control panel configurations. The survey of applicable multifunction 
display and control technology was based on the background provided by this 
information. 

2.1.1 HARDWARE AND SOFTWARE 

The hardware a|>plicable to an Orbiter MFDCS was surveyed through a combination of 
literature searches, vendor contacts and discussions with industrial and Government 
personnel involved in display and contro: research and development. One of the 
principal areas surveyed was that of displays, included were both CRT displays and 
flat panel displays. A number of CRT varieties were considered. Among them were 
monochrome stroke writer and raster, beam penetration color and shadow mask color 
tubes. Several new types of tubes were just coming onto the market or were being 
developed. An example of a new configuration was represented by a monochrome flat 
CRT being developed by Sinclair in Great Britain. A schematic diagram of this tube is 
shown in Figure 2.1-1. The electron gun is located at the side of the tube as opposed 
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to the normal rear location. This configuration offers savings in volume and power 
when scaled up to larger sizes. Another recent developm-nt was the application of 
shadow mask color CRTs to flight cockpit use in commercial aircraft. These tubes, 
marketed by Collins, Sperry <5c Smith Industries use a high brightness shadow mask tube 
driven in both a stroke writer and raster scan mode to present navigation diagrams, 
aircraft attitude and systems status and display of radar information. An example of 
the type of display presented is shown in Figure 2.1-2. Vector and symbology 
information is portrayed in a stroke written mode, while the raster is used for 
producing color fill areas. This type of display permits a wide range of parameter 
formats to br displayed with the same hardware. A major current application is in the 
new Boeing 757-767 aircraft. 

Flat panel displays were found to be under development or available on the market in a 
number of different forms. Those applicable to present or near future (3-5 years) 
Orbiter applications were LED, LCD, VF, TFEL and plasma panels. Potential 
advantages offered relative to CRT displays were seen as lower power requirements, 
lower volume, more graceful degradation characteristics and longer life. Disadvan- 
tages included a lack of color capability, limited type and size options, low resolution 
and relatively small size. One panel currently available is the Sharp TFEL panel shown 
in Figure 2.1-3. This unit provides a black on yellow display capable of alphanumeric 
or graphics portrayed on a 9 x 12.5 cm, 240 x 320 pixel array. A summary of both the 
CRT and flat panel displays was compiled. Figure 2.1-4 shows a summary of relative 
parameters for the various display types. 

Control devices were another area s irveyed in Task 1. Emphasis was placed on newer 
devices relevant to multifunction applications. Touch panels, multifunction switches 
and voice recognition and entry systems were the primary items considered. Touch 
panels were available using a number of sensing techniques (e.g., resistive, capacitive, 
infrared) and were adaptable to a variety of display types and sizes. They were 
coming into increased use in a wide variety of applications. Figure 2.1-5 shows an 
installation on a CRT used in flight test work. One disadvantage was the ease of 
accidental activation. 
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Multifunction switches currently coming into availability use a flat panel array to 
present a programmable legend. Supply was limited to a few prototype units with 
production in limited quantities projected for late 1982. These units offer a modular 
design capable of a variety of locations in the cockpit and a positive tactile feedback 
to the operator. One unit, produced by MicroSwitch, displays either alphanumeric or 
graphic symbols or a 16 x 35 dot matrix LED array. Switch size is approximately 2.5 x 
3.8 cm. 


Processing and memory capabilities were also surveyed. The primary development in 
processing and solid state memory was the continuing trend toward smaller size and 
higher speed. Sixteen bit microprocessors operating at speeds of 10 MHz or more were 
seen for an increasing number of applications. Memory chips are becoming available 
with greatly increased densities at low cost. The introduction of the 64K RAM chips 
and low costs ($5-10) associated with these chips make large memory arrays possible 
at relatively small cost and volume. The introduction of 256K RAM chips will increase 
this trend even further. Larger scale mass storage memories in the form of hard disks 
are coming into use on aircraft. One example was a sealed disk unit made by Sperry 
for recording flight data on commercial airliners. A very large read-only storage 
capability is now available using video discs. These units are coming into use for 
storage of maintenance data and cartographic information as well as pictorial scenes. 

In general, a large amount of technology was found to be currently available for 
application to multifunction display and control systems. An increasing choice in all 
categories can be expected in the next few years. Several multifunction control and 
display systems have been developed using this technology. An example is the Boeing 
Universal Display and Control System (UDACS) which is being produced for the 
retrofit of P3 antisubmarine patrol aircraft for the Royal New Zealand Air Force. 

2.1.2 HUMAN ENGINEERING 

Principles for the design of an access schema for a multifunction display and control 
system were investigated as part of MFDCS technology. A primary requirement for 
any of the design techniques is a functional analysis and understanding of the operating 
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modes of the system. These data form the basis from which the logical structure of 
the access schema is defined. Consideration must be given to control importance, 
frequency of use, and interaction with otner systems in determining the number of 
levels through which the operator must go before reaching the desired function. 
Several methods for developing the access schema were assessed. Most involve an 
iterative procedure in which an access schema is devised, tested and modified as a 
result of the test data. This procedure is continued until a satisfactory access schema 
is defined. A diagrammed example of this process is shown in Figure 2.1-6. 

2.2 TASK 2 (APPLICATION OF TECHNOLOGY) 

During work on Task 2, two basic efforts were undertaken. The first was a functional 
analysis of the OMS and EPDCS controls and procedures. The second was the 
combination of the available multifunction display and control technology with the 
design constraints pertinent to the Orbiter and the goals of the study to generate 
alternate MFDCS design concepts. 

2.2.1 FUNCTIONAL ANALYSIS 

An essential part of the design of a MFDCS is a complete compilation of the system 
controls and functions. Particularly important in the case of the Orbiter is the 
handling of malfunction procedures which can often become time-critical during the 
ascent and reentry phases of the mission. During Task 2, the greatest effort was 
applied to the analysis of the OMS and its associated procedures. To accomplish the 
analysis, the available literature was studied in detail and conversations concerning 
actual operation were held with NAS A- JSC personnel. 

The OMS is used to place the Space Shuttle into final orbit after the external tanks 
(ET) are dropped off; to change the orbit characteristics, and finally to reduce the 
Orbiter's velocity in order to t stum to earth after a mission. It is also used if a 
mission abort is necessary requiring return to the launch site during the ascent phase. 
In this case, the propellant is dumped. Four subsystems were found to be the major 
OMS components. These are: the Engine Control where thrust is produced; the 
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Bipropellant Control where system valving admits propellant to the engine ignition 
chamber; the- Thrust Vector Control (TVC), which points the thrust in the desired 
direction, and the Propellant Thermal Control, which prevents propellants from 
freezing in the lines. Operation of each of the subsystems was studied and the 
interactions of the switches, controls, sensors and CPC's was considered and discussed 
in terms of actual mission operation. Malfunction procedures were examined and 
possible methods for including them in the MFDCS access schema were formulated. 

A similar process was begun during Task 2 for the EPDCS. The EPDCS distributes 
Orbiter electrical power from the three fuel cells to the various Orbiter systems using 
a variety of buses. Incorporated in the EPDCS is the capability to monitor the system 
through gauge readings, talkbacks and CRT displays as well as the capability to tie 
main buses together for greater system redundancy. 

The three fuel cells each supply power to a Main Bus and an Essential Bus. From a 
Main Distribution Assembly, each Main Bus provides power to Power Control Assem- 
blies and Panel Buses. The Power Control Assembly supplies power to the Load 
Control Assemblies, Motor Control Assemblies, AC Bus Generation and Distribution 
Assembly and Control Buses. An important feature of the EPDCS is the fact that the 
control of this system does not depend on routing of information and commands 
through the CPC’s. As a result, the MFDCS must be able to drive the relays, etc., 
associated with the present controls. In addition, the MFDCS must be able to receive 
and display system status information from the GPC data buses and/or from the 
EPDCS gauges and meters. 

A majority of the requirements for possible crew interaction with the EPDCS were 
found to be concerned with various possible malfunctions which might occur (e.g., fuel 
cell failure). In the event of a failure, a number of systems may be impacted 
depending on the nature of the failure. This could result in a large enough number of 
caution and warning alerts to obscure the basic problem to the operator. Thus, a 
necessary feature of the MFDCS was the capability of prioritizing conditions and 
displaying to the operator the appropriate anomalies to correct first. 
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One of the results of the functional analysis was the compilation of a table of OMS and 
EPDCS controls and functions. These are listed at the end of this report in 
Appendix A. 

2 . 2.2 ALTERNATE DESIGN DEVELOPMENT 

The development of the alternate design concepts required the combination of the 
study goals and constraints with the features of the available multifunction display and 
control technology to arrive at a prospective design. Some of the factors considered 
are listed below. These factors were combined with hardware options from Task 1 to 
arrive at several design concepts. 

2.2.2. 1 LOCALIZATION OF SYSTEM-SPECIFIC DISPLAYS AND CONTROLS 

Present controls are spread over several different flight deck locations. The MFDCS 
should collect these various displays and controls into one integrated panel or panels, 
capabl of handling both the OMS and EPDCS. 

2.2.2.2 INTEGRATION OF CHECKLISTS, MALFUNCTION AND TROUBLESHOOTING 
PROCEDURES 

Present checklists and malfunction procedures are carried as cue cards or as paper 
copy in which the appropriate procedures can be looked up. The MFDCS should 
incorporate these lists into the MFDCS displays. 

2.2^.3 SYSTEM AUTOMATION 

The present display and control system presents available data to the operator upon 
request. The MFDCS should also include the capability to make intelligent decisions 
about which data the operator needs to see. Thus, in the event of an alarm, the alarm 
indication might be accompanied by the appropriate data to diagnose the problem. 
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2.2.2.U CREW SUPERVISORY COMMAND CONTROL 

At present, the Orbiter crew retains control over almost all the accessible controls. 
The implementation of automation within the MFDCS must provide the option of 
equivalently complete crew command control. 

2.2. 2.5 INTERFACE COMPATIBILITY 

To be applied to the present Orbiter simulators or vehicles, the MFDCS must interface 
as closely as possible with the current electrical and mechanical interface and with 
the available Orbiter panel and depth provisions. 

2J.2.6 MINIMAL SOFTWARE IMPACT 

The Orbiter software requires a long lead time and considerable analysis for 
modifications to be made. The MFDCS should require a minimum impact on the 
existing software to interface with the General Purpose Computers (GPC's). Thus, the 
MFDCS unit should be essentially self-contained with ;e*pect to software and should 
"look" like the original arrays of switches and controls to the GPC's. 

2.2.2.1 MINIMIZATION OF WEIGHT, POWER AND COOLING 

Reduction of vehicle weight for Orbiter flights increases the useful payload. Weight 
reduction can be accomplished through reduction of equipment weight or a reduction 
of the capacity of the support required for power and cooling. The MFDCS design 
should thus attempt to minimize the required weight, power and cooling through the 
overall system design and the hardware choices. 

2.2.3 ALTERNATE DESIGN CONCEPTS 

Alternate design concepts arrived at ranged over several levels of complexity for 
presenting necessary information to t.ie operator. In all cases, it was found necessary 
to design the MFDCS as an essentially stand-alone system with the simulation of 
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current control commands to the GPC's duplicated as nearly as possible in the 
interlace. This served to minimize the impact on existing hardware and on the 
software changes necessary to the GPC's. The design concept access schema was 
developed in preliminary form to handle checklists and provide access to all the 
current control functions of the OMS and EPDCS. Figure 2.2-1 shows a typical 
multifunction keyboard layout and an associated logic tree example developed as part 
of the initial access schema. 

Display and control designs considered included multifunction keyboards combined 
with a small scratchpad display, a larger tabular display, a high resolution graphics 
display and both the tabular and graphics display. The various options considered are 
illustrated in Figure 2.2-2. Both the OMS and EPDCS were judged to benefit from the 
inclusion of both a medium resolution tabular display and a higher resolution graphics 
display for presenting system status to the crew member. The tabular display was 
considered primarily as a means of displaying and processing checklists and proce- 
dures. The definition of hardware to be used was done during Task 3. 

The design concept selected for further development was seen as fulfilling the goals of 
reducing flight deck clutter through the use of the multifunction keyboard and of 
integrating the display of system status into a localized interactive station. 

2.3 TASK 3 (CONCEPT ANALYSIS) 

The major subtasks cf Task 3 were the definition of alternate hardware implementa- 
tions of the preferred design concept, the analysis and feasibility testing cf these 
hardware options with respect to the study goals and constraints and the development 
of a more complete MFDCS access scheme. 

2.3.1 ALTERNATE DESIGN DEFINITIONS 

Various hardware options were considered for implementation of the preferred design 
concept. The design options for processing ana the interfacing to the keyboard host 
and the various displays were based on the general architecture shown in Figure 2.3-1 
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Figure 2.2-1 NrDCS Concept - OMS System 
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where the dashed lines indicate optional interaction paths. Display options considered 
CRT and flat panel devices for use in the various displays. In the general design 
considered, the processor interacts with the CPC's via a communication link which 
provides the MFDCS processor with data and caution and warning alerts and permits 
the MFDCS to transmit command messages which simulate the interfaces previously 
used by the OM5 and EPDCS switches. A high resolution display (~32 lines/cm) 
provides the capability for the display of schematic diagrams representing configura- 
tion and status of Orbiter systems. The medium resolution display (25-30 lines/cm) is 
used for the display of checklists, procedures and limited instrumentation or trend 
data. The multifunction keyboard provides the operator input mechanism for issuing 
commands to the GPC's and for manipulating the MFDCS displays. 

Hardware options were defined for the GPC-MFDCS interface, the MFDCS processing 
architecture, processor-keyboard/display interface, and the MFDCS displays. Analyses 
and feasibility testing were conducted on these options. 

2.3.2 ANALYSIS AND FEASIBILITY TESTING 

Analyses were performed to evaluate hardware requirements and options. A number 
of potential options were limited by the currently available hardware. 

2.3.2.1 DISPLAYS 

Both monochrome and color CRTs were considered for the high resolution display. 
Figure 2.3-2 was taken from the set of diagrams developed for the access schema and 
used to evaluate display options. Display resolution requirements were defined by 
constructing the diagram of Figure 2.3-2 in a variety of pixel resolutions from 128 to 
768 pixels on a side, using a raster CRT graphic generator. An example is shown in 
Figure 2.3-3. Analysis of characters and line separation indicated a need for a 
minimum of 512 line resolution. The difficulties in attaining high brightness with a 
raster tube indicated a requirement for stroke writing capability. Consideration of the 
display clarity to operators using the experience associated with color use and choices 
in the Boeing 757-767 cockpit and judgments of the proposed Orbiter displays led to 
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the decision to suggest a color stroke-raster CRT as the high resolution display choice. 
This choice is discussed in greater detail in Section 4. The tabular display and 
multifunction keyboard display choices were analyzed with respect to size, power 
consumption and availability. Choices with sufficient luminance were determined to 
be LCD and LED displays. An analysis of required character sizes for adequate 
legibility and of font styles for flat panel dot matrix displays was conducted. These 
results defined the display sizes chosen in Section 4 and the font style shown in Figure 
2.3-4. The font was chosen to minimize confusion due to row or line failure and to 
reduce power consumption. 

2.3JL2 CONTROL DEVICES 

The basic control device choices for the MFDCS were multifunction switches, bezel 
editing switches and touch panel overlays. Bezel edit switches were found to present 
problems because of the number of lines of tabular data needed and the rather coarse 
resolution capability of the bezel edit switches. Touch overlay panels were analyzed 
and found to have a high susceptibility to accidental activation in the low gravity 
Orbiter environment. Multifunction programmable, legend switches offered a positive 
tactile feedback, the required brightness range and a LED dot matrix array as the 
display. These switches are discussed in greater detail in Section 4. 

2.3.2.3 PROCESSING 

A first step in analysis of the processor requirements was the decision on how the 
system was to be partitioned given the desired display complement. A desirable 
criterion was that the various display components be modifiable as time progressed 
without affecting the whole system. In addition, an estimate of the processing time 
required to maintain the refreshing of LED multifunction switches, a medium 
resolution checklist display and a high resolution graphics display showed that d single 
processor would be too heavily loaded to provide rapid response times. A goal of <0.2 
seconds was set for the update of the keyboard displays. Similarly the desired update 
time for the checklist display was set somewhat higher at <0.S seconds. Update time 
for the high resolution displays was permitted greater latitude with a time on the 
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order of l second being deemed satisfactory. The update rr t te for dynamic subseg- 
ments of the high resolution display however, was targeted at <0.2 seconds as in the 
case of the keyboard update. 

To permit higher speed operation, the MFDCS processing was divided into several 
subsegments. The central controller processor handles the storage and distribution of 
commands and legends to the keyboard and checklist display. In addition, the central 
controller handles the communications with the host computer (GPC). The large 
number of checklists and procedures to be displayed on the medium resolution display 
requires a considerable amount of memory. For this reason, the medium resolution 
display was assigned its own processor and memory. 

The graphic display will in general, require its own memory and processor for the 
storage of images and dynamic modification of the display. Commands from the 
controller will define the image and/or the subsegment modification to be made. 
Examples of displays selected from the OMS and EPDCS indicate that the majority of 
the image will remain static. The arrangement of the processing architecture 
described above is indicated in Figure 2.3-5. 

An analysis of the processing speed and memory required for the controller processor 
was conducted using two different processors to represent 8 bit (Intel 8085) and 16 bit 
(Intel 8086) microprocessors respectively. The general analysis was part of another 
Boeing keyboard development program, but the OMS and EPDCS were used as 
examples for the results quoted in this report. The analysis makes the assumption of a 
serial RS 422 interface to each set of four switches and a serial line to the medium 
resolution display. The analysis showed that for the assumed instruction mix and the 
interfaces chosen, the update rate for multifunction switches would be limited by 
transmission time for up to 20 switches for the 8085 and up 40 switches for the 
8086. Above this number of switches the throughput of the processor becomes the 
limiting factor as shown in Figure 2.3-6. Two cases were considered. The first was 
the time for pure alphanumerics and the second was the required update time for 
graphic displays on the switches. 
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These -esults were tested using a 8085 controller and a set of four switches as 
examples of the keyboard. Using the set of four and an data base designed for these 
four switches, the update time was measured. These results were actually found to be 
valid for up to 28, as opposed to the estimated 20, switches and an update time of 
52ms for alphanumeric displays was obtained. For pattern map displays the estimated 
time to update the keyboard is longer and was measured at 250ms. Most keyboards 
will use a mix of symbols and alphanumerics and the total mix update time should be 
<0.2 seconds. The measured points are shown as circles on Figure 2.3-6. 

A limited 'est of a TFEL medium resolution panel was conducted using both a graphic 
and an alphanumeric display. The results showed an update time of 608ms for 
alphanumeric data and 250ms for a graphic display. This test employed a shared bus 
structure and would result in slower update times than those for a dedicated processor. 
This relation for the various interface/options is shown in Figure 2.3-7. 

A good example of a high resolution color display suitable for inclusion in the MFDCS 
was not available. Tests were conducted on the update rate of a small color video 
display. The results showed that an update rate for dynamic symbol modification of 
<0.2 seconds was achievable. In general, an update time of >30 frames/second is 
achievable for high resolution stroke or raster graphic generation systems. 

The same set of four switches was used to test the operation of the data base 
structure. The data base format was structured in the same way a larger keyboard 
array would be handled. Each page of legends stored in the controller memory 
contained the command, if any, to the GPC, the vectors to legends to be displayed on 
the keyboard and commands to the medium and high resolution displays. Also included 
was the vector to the previous legend page. The 8085 controller was found to perform 
satisfactorily, displaying the appropriate legends in the correct logical sequence and 
transmitting the correct commands to the host. The test is described in Section 4. A 
64k byte memory was found to be adequate for the controller data base storage and 
operating system. 
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2.3.2.* INTERFACE ANALYSIS 

The interfaces between the host and controller and between the controller and displays 
were analyzed to determine the type of data transfer to be used. Parallel and serial 
da .a line were investigated. The host (GPC)-controller interface will be defined by 
the access available to the data bus or GPC on the orbiter. The controller tested was 
designed to operate with an RS-232 interface with the intent of interfacing in a 
modular fashion to permit changes to the interface routines without changing the basic 
operating system. 

The interfacing to the keyboard multifunction switches was investigated and an RS 422 
serial line was selected to interface to each unit of four switches. A parallel line 
interface was found to be unnecessary with respect to required data transfer speed and 
required a larger number of wires between controller and keyboard. The RS 422 serial 
line was chosen over the RS 232 because it required a single 5 volt supply and provided 
a better driving capability for remote operation of the keyboard relative to the 
controller. An operating speed of I9.2kb was selected. 

2.3.3 ACCESS SCHEMA DEVELOPMENT 

Discussions of the preliminary access schema developed in Task 2 coupled with the 
further functional analysis of the EPDCS indicated a need for greater automation of 
procedures and checklists if the operation of the MFDCS was not to become 
cumbersome. The access schema developed was the end result of a number of 
different trials at developing a technique for reducing the number of keyboard formats 
required and minimizing returns to the keyboard top level. The access schema 
developed in Task 3 is basically the one recommended in Task ft. A discussion in 
Section 3 describes the details of operation. 
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3.0 MFDCS ACCESS SCHEMA 

The access schema developed for the MFDCS performs the functions indicated as goals 
for the system. These include incorporation of checklists and procedures, localization 
of controls, automated handling of checklists, procedures and malfunctions and 
retention of supervisory crew command and control. The access schema also provides 
an interactive graphic representation of system status for use by the crew. 

3.1 MODES OF OPERATION 

The MFDCS is designed to operate in four modes. These modes are illustrated in 
Figure 3.1-1. Interconnecting lines on the diagram indicate the linkage between these 
four modes. 

3.1.1 SYSTEM STATUS MODE 

The top level of the access schema is the System Status mode in which the operator 
has access to all the MFDCS systems. This mode covers normal or malfunction 
procedure operation of the systems and presents the crew with an overall display of 
system status and the keyboard entry options to access the individual systems such as 
the OMS or EPDCS. At operator option, the high resolution graphics display presents a 
block diagram of systems under MFDCS control. The keyboard display for this level is 
illustrated in Figure 3.1-2. Occurrence of a caution and warning alert at this level 
will indicate the system(s) requiring operator attention on the high resolution display 
by a block color change and an anomaly message display at the bottom of the screen. 

3.1.2 NORMAL OPERATION MODE 

If no caution and warnings are present, the system may be operated in the normal 
mode. In this mode, a system (such as OMS) is selected from the top level keyboard. 
This selection brings up a menu of normal operations for that system on the high 
resolution display and provides the operator with a keyboard display to select the 
procedure desired (see Figure 3.1-3). The operator enters the procedure selection 
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Figure 3.1-1: MFDCS OPERATING STRUCTURE 
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number from the menu and indicates whether an automatic option or single function 
(manual) access h desired. At this point the procedure appears on the checklist 
display and in the automatic option the keyboard shown in Figure 3.1-4 would appear. 
Activation of the Auto Mode Key followed by the EXEC key will cycle through the 
whole procedure automatically. A single step mode is available at any time through 
the STEP AUTO key. CANCEL eliminates an action before execution. A basic ground 
rule in the system is the requirement for activation of the EXEC key for all command 
functions which change the system configuration. BACK returns the operator to the 
previous page. Here too, the operator has the option of performing all or part of the 
procedure and, if performing all, of doing so in an automatic or semi-automatic mode. 
The choices between automatic, semi-automatic or partial procedure implementation 
preserve the command supervision capability of the crew while providing the capa- 
bility for automation during conditions of heavy workload. 

3.1.3 CAUTION AND WARNING HANDLING MODE 

Fault detect'on, alerts and warnings are handled by the Caution and Warning Handling 
mode. Incoming fault messages are prioritized in terms of probable system impact and 
displayed to the operator. The operator may then select which, if any, of the faults he 
wishes to deal with. Selection of a fault to deal with also provides the operator with a 
suggested procedure, if available, for dealing with the problem. 

If a caution and warning (CJcW) signal occurs, the problem will be displayed at the 
bottom of the CRT and/or scratchpad display together with a suggested procedure. In 
the normal mode the operator simply backs up to the top level using the BACK key and 
from there accesses the CJcW procedure suggested. In tK e event that a C«5cW of 
overriding importance occurs, the keyboard can exhibit a forced display requiring 
operator acceptance or acknowledgement of the CicW. Acknowledgement will remove 
the forced display. Acceptance will take the operator directly to the C&W mode, 
eliminating the need to back up to the top and then access from there. Once in the 
CJcW mode, the operator will be presented with a hierarchical list of procedures 
accompanying the prioritized C>5cW messages. Selection of a procedure leads to the 
automatic procedure handling area of the normal operation mode. 
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During the performance of any procedure in which the checklist is displayed on the 
flat panel display, the software will display a check beside each step performed or 
previously performed. 

3.1.4 INDIVIDUAL SWITCH CONTROL AND FUNCTION ACCESS MODE 

This mode of operation is similar to the system currently available on the Orbiter in 
that it provides access to the individual switch and control functions within the 
system. In addition, this phase includes the most detailed displays of the subsystems 
within the OMS and EPDCS. Although very comprehensive, this mode is more time 
consuming to operate within than are the other modes. As a result, it is envisioned 
primarily for use in a diagnostic or trouble-shooting mode during periods when the 
crew has more time to work on problem solutions. This mode is accessed through the 
manual keyboard. If the MANUAL KEYBD option is selected then the operator must 
address each valve or control using the manual keyboard (Figure 3.1-5), the checklist 
display procedure, and the status indication on the schematic display. At this point, he 
is in the Individual Switch and Control Function Access Mode. 

3.2 EXAMPLE OF OPERATIONS 

In order to better understand operations and function of the MFDCS, the following 
detailed description of its application to the Orbital Maneuvering System (OMS) is 
contained below. 

As previously described in the Access Schema, the top level keyboard contains access 
keys to all of the applicable subsystems as shown in Figure 3.1-2. The display 
associated with this keyboard, which is an extension of the C&W system, shows the 
system state, i.e., whether any element of that subsystem is in either a normal or 
out-of -limit state. 

Once alerted to a non-normal condition or for any other reason, the operator can 
examine that subsystem in more detail by depressing the subsystem key, in this case, 
the OMS key. 
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Depressing the OMS key brings up a menu of system conditions, checklists and 
schematics from which the operator can select. The OMS menu is shown in Figure 
3.2-1 and each item on the menu is numbered. The operator can then select the 
desired schematic/checklist by keying in the number shown on the menu. Execution of 
this selection is accomplisheo by selection of the MANUAL KEYBD or AUTO KEYBD 
(see fig. 3.2-2). 

For example, if the operator desires menu item //I and wishes to converse with the 
system manually he would key as follows: 


MANUAL 

KEYBOARD 


Result: 

CRT - OMS //I schematic interactive display (fig. 2.3-2) 

Flat Panel - echo of keyboard entry 
Keyboard - manual (fig. 3.2-3) 

However, if an automatic L-R X feed is desired, the operator would key as follows: 


3 > A UTO 

KEYBOARD 


Result: 

CRT - L-R X feed valve configuration schematic (fig. 3.2-4) 

Flat Panel - L-R X feed checklist (fig. 3.2-5) 

Keyboard - Auto (fig. 3.2-6) 

The pictoral transition from normal to X feed configuration schematics is shown in 
Figures 3.2-7 thru 3.2-14. 
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1. SYSTEM STATUS - ENGINE AND PROPELLANT 

2. LEFT ENG. LOST - NORMAL FEED 

3. LEFT ENG. LOST - L-R X FEED 

4. LEFT ENG. LOST - MIXED FEED - L OX R FU 

5 . LEFT ENG. LOST - MIXED FEED - R OX L FU 

6. RIGHT ENG. LOST - NORMAL FEED 

7. RIGHT ENG. LOST - R-L X FEED 

8. RIGHT ENG. uOST - MIXED FEED - L OX R FU 

9. RIGHT ENG. LOST - MIXED FEED - R OX L FU 

10. FU and OX TANK PRESSURE HIGH 

11. N2 TANK PRESSURE LOW 

12. N 2 REG. PRESS HIGH 

13. N2 REG. PRESS LOW 

14. Ne TANK PRESS LOW 

15. PC LOW (DURING BURN) 

16. TEMPERATURE LOW (DURING BURN) 

17. OMS SECURE 


Figure 3,2-1 OMS MENU 
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The number of digits in the menu selection is of no consequence since the software- 
selection loop is closed by the keyboard selection key which serves as an "execute" 
function. 

Once the operator decides to operate in the automatic mode by requesting the AUTO 
KEYBD, he has a further option of performing the checklist in the fuily AUTO mode or 
STEP AUTO mode by pressing the appropriate key on the automatic keyboard (fig. 3.2- 
6 ). 

In the AUTO mode all steps contained in the checklist are rapidly performed 
sequentially, each change being reflected in the interactive schematic displayed on the 
CRT. 

In the STEP AUTO mode ail steps are also automatically performed, except that each 
successive step will not be performed until the operator either CHECK or SKIPs the 
preceeding steps. 

The MANUAL keyboard as noted in Figure 3.2-3 allows f he operator to change the 
status of any valve or switch in the system by individual commands. Each valve or 
switch may be addressed by keyboard aiphanumerics as shown on the schematic. 
Commands are executed by pressing the EXEC key. 

Example: Left engine switch on 

ENG SWITCH — ► LEFT -► ON — ► EXEC 
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Figure 3.2-3 OMS - MANUAL KEYBOARD 
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Figure 3.2 -4 OMS VALVE STATUS DISPLAY FOR L-R XFEED. VALVES MAY BE 
MANUALLY CONFIGURED FROM MANUAL KEYBOARD OR 
AUTOMATICALLY CONFIGURED USING AUTO KEYBOARD. 
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Figure 3. Z-5 QMS L-R X FEED CHECKLIST 
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Figure 3.2-6 OMS/EPDCS KEYBOARD-AUTOMATIC MODE 




Figure 3.2-7 DISPLAY SHOWING ANOMOLY MESSAGE "LEFT ENGINE LOST", 
START L-R X FEED CHECK LIST 
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Figure 3.2-9 OPEN VALVES 5 and 6 
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Figure 3.2-11 OPEN VALVE 7 and 8 
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Figure 3.2-13 CLOSE VALVES 11 and 12 
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♦.0 HARDWARE/SOFTWARE SELECTION 

The selection ol hardware and software described in this section is designed to 
implement a design specifically addressing the OMS and EPDCS and located primarily 
in the R1 panel of the Orbiter flight deck. This configuration satisfies the constraints 
of minimizing the impact on the current Orbiter hardware and software. It should be 
noted, however, that the software, and to a large extent the hardware, are applicable 
to a larger number of systems and to relocation of the system to another portion of 
the Orbiter flight deck. This section includes a discussion of the considerations 
pertinent to a wider application of the MFDCS. In addition, some of the future options 
with respect to hardware choices are addressed. 

*.l PRESENT TIME FRAME 

This section describes the hardware and software design of the MFDCS and a comple- 
ment of hardware currently available to implement the design. Rapidly advancing 
technology in several areas of the MFDCS design has dictated a modular design to 
permit updating of the hardware as a function of time. 

*.1.1 HARDWARE DESIGN 

The hardware design for the MFDCS is b'.sed on a bus structure through which the 
various hardware modules of the system are linked to the MFDCS processor. The 
general configuration is shown in Figure *.1-1. The hardware design is directed 
towards construction of a crew station mockup with consideration given to future 
flight application. 

*.1.1.1 MFDCS PROCESSOR AND BUS STRUCTURE 

Processing speed and system response time were considered in Task 3 and testing with 
an S-bit processor showed a sufficient speed for anticipated MFDCS requirements. At 
this time, 16-bit microprocessors awe coming into increasing use in display and control 
systems. The 16-bit units offer several advantages including higher speed, greater 
memory handling capacity and a more powerful and flexible set of instructions and 
registers. For these reasons, the future data handling ,id expansion options of the 
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Figure 4.1-1: MFDCS Hardware Schematic 
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MFDCS would be best served by choosing a 16-bit microprocessor at this time. The 
combination of a Z8001 microprocessor and an Intel Multibus bus structure was chosen 
for the MFDCS design. The Z8001 offers the advantage of military standard 
qualification for future flight implementation of the system as well as the features 
described above. The Multibus bus structure was chosen to take advantage of the 
large number of standard modules configured for this bus. Use of standard commercial 
boards during the development of a MFDCS allows rapid reconfiguration of the system 
without going through a large amount of circuit redesign. 

4. 1.1. 2 MEMORY 

Memory requirements for the MFDCS will be ultimately determined by the number of 
procedures and checklists incorporated in the system data base. A basic system for 
simulation use as shown in Figure 4.1-1 would include 128Kb of PROM and 256Kb of 
RAM. The PROM is used to store the operating system and a nominal system data 
base. The RAM memory stores the operating data base, thus allowing an alternate 
data base to be downloaded from the host computer or from another computer 
containing the new data base. These size estimates are based on a limited example of 
the OMS and EPDCS data base as implemented on a Boeing demonstration unit having 
32Kb of PROM and 64Kb of RAM. An estimate was made of the number of pages 
required for legends, and displays and the memory required per page for the OMS and 
EPDCS data base. This estimate resulted in a memory requirement of 59K bytes 
including the operating system. The recommended memory will provide a comfortable 
margin for growth or multiple data bases. 

The Z8001 and the multibus configuration permit memory expansion up to a total of 
8Mb in 64Kb blocks. The required amount of memory can thus be added to the system 
depending on the data base complexity. 

4.1. 1.3 HOST INTERFACE 

The host interface will be defined by the requirements of the control commands to be 
sent to the CPC's. The purpose of the host interface is to produce signals which will 
dupucate the signals originally generated by tht switches and controls which are 
incorporated into the MFDCS. The objective is the minimization of impact on the host 


D 1 80-2721 5- 1 
63 


THC £9£FJF’fA/4Br COMPANY 

software presently in place. For the work done in this study, the exact nature of the 
interface has not been specified. The multibus configuration however is adaptable to a 
wide variety of interfaces ranging from the RS-232 link commonly used to the military 
1553 bus. 

*.1.1.4 NON -G PC CONTROL INTERFACE 

While many of the OMS controls are routed through the GPC's and are handled by the 
host interface, a number of the switches and controls are directly connected to the 
actuator or function they control. A particularly common example is the use of 
circuit breakers in the EPDCS. The operation of these controls or switches by the 
MFDCS requires an interface to drive such items as relays and power controllers in 
response to commands from the MFDCS. Operation of circuit breakers will require 
the replacement of the manual breakers by remotely controlled breakers. Precise 
definition of this interface will depend on the drive requirements of the non-GPC 
controls, switches and circuit breakers. 

*.1.1.5 MULTIFUNCTION SWITCHES 

Multifunction switches with fully programmable legenc , are currently quite limited in 
availability. The inclusion of tactile feedback as part of the switch and the need for 
avoiding inadvertent activation eliminates the touch panel overlay switch array from 
consideration. At the present time, the switch most closely matching the requ : re- 
ments for luminance, tactile feedback and color are multifunction switches con- 
structed by MicroSwitch and currently being produced in limited prototype quantities. 
Figure *.1-2 shows a schematic diagram of the switch. Each Programmable 
Pushbutton Switch (PPS) contains a display composed of a 16 x 35 x-y dot matrix array 
of green LED's. Resolution of the display is 16 lines/cm (*0 lines/inch) and typical 
power requirements are i.3 watts/switch. Figure *.1-3 shows an array of four 
switches with a variety c legends displayed. The dot matrix array is fully 
programmable and normally displays up to two rows of six alphanumeric chararacters 
in a 5x7 font. Alternatively, any graphic symbol within the limits of the 16 x 35 
diode array can be displayed. The tactile feedback force curve for the switches is 
shown in Figure *.l-*. Each switch contains its own drive electronics for the LED 
display. Groups of up to four switches are interfaced to a logic refresh and control 
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(LRCU) board which includes the switch refresh memories and a ZS microprocessor to 
interface the switches to a controlling microprocessor. Commands for display update 
are passeo to the Z8 microprocessor by an R5-422 line which provides a long line 
driving capability, noise rejection, and a single 5 volt voltage requirement for the 
switches and LRCU. 

To form the multifunction keyboard used in the MFDCS, an array of 23 switches 
arranged in seven rows of four will be used. All switches will be controlled by the 
Z3001 MFDCS controller which formats all commands and messages sent to the 
keyboard for display and receives indications of switch activation from the ZS 
microprocessors. 

4.1. 1.6 MULTIFUNCTION SWITCH I/O 

The I/O to the multifunction switches consists of a standard serial RS-232 port (for 
each set of four switches) modified to drive the RS-422 line. The output ports and 
Z8's operate at programmable baud rates up to 19.2 kb/sec. The multifunction 
keyboard will require seven of these serial RS-422 I/O ports. Current design response 
speeds are achieved at the 19.2kb rate. 

4. 1.1.7 CHECKLIST AND PROCEDURE DISPLAY 

In Task 3, a savings in power and space requirements were indicated by using a flat 
panel display medium for presenting checklists and procedures to the operator. 
Medium size flat panel displays with character capacities of 200 to 500 on the screen 
have been introduced to the market in a variety of forms. These include LED, liquid 
crystal display (LCD), vacuum flourescent and thin film electro luminescent (TFEL) 
displays. Figure 4.1-5 shows the relative power level of several display forms. 

Currently available TFEL and vacuum flourescent panels do not have sufficient 

u 

brightness to satisfy the Orbiter luminance requirements in a 10 fc ambient light 
environment. The available options then become the LCD and LED panels. 
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Figure 4.1-5: POWER/UNIT AREA FOR VARIOUS DISPLAY FORMS 
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LCD panels are under development by a number of manufacturers in the size range 
needed for the Or biter MFDCS. These include 3M, Panel vision and General Electric. 
Of these sources, Panelvision expects to market prototype displays in the fall of 1982. 
The Panelvision technology incorporates thin film transistors on the LCD display in 
order to avoid the multiplexing problems usually associated with a high number of lines 
in the display. The 3M and GE panels accomplish the same thing with a phase change 
in the LCD material and the use of a varistor array respectively. Either of these 
panels would also represent a good choice if available. Back or edge lighting would be 
used to provide adequate contrast at low luminance levels. 

An alternative to the use of the LCD panel which provides sufficient display luminance 
is the LED array. Litton of Canada is currently producing green LED displays in a 
2.5 x 7.5 cm dot matrix format with a resolution of 24 lines/cm for use in the F-16. 
These units are qualified with respect to military standards and provide a 2:1 contrast 
ratio at 10 fc ambient illumination. The units are made up of 2.5 x 2.5 cm modules 
and the basic module can be used to build a larger array. A 7.4 x 10 cm array would be 
satisfactory for the checklist display. The major drawbacks to the LED arrays are 
high power consumption and relatively high cost. 

4.1.14 CHECKLIST AND PROCEDURE DISPLAY PROCESSOR 

The analysis of the checklist and procedure display carried out in Task 3 indicated that 
sufficient response speed could be achieved through use of either a dedicated 
processor or through shared use of the MFDCS control processor. For this application, 
the modularity of the system would be improved by using a dedicated display processor 
to handle the checklist and procedure displays. The processor choice will depend on 
the availability of the flat panel displays and on whether a processor is already 
incorporated into the display panel. Tne processor will interface to the MFDCS 
multibus. 
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♦.1.1.9 SCHEMATIC DISPLAY 

Requirements for the schematic display were defined in the study of resolution, color 
and character size conducted under Task 3. Consideration of the displays necessary 
for the OMS and EPDCS indicate the need for a hybrid stroke/raster color CRT 
display. A survey of potential applicable displays indicates a color display being 
developed by Sperry as a suitable unit. This display provides both raster (256 lines) and 
stroke display capability. The Sperry Size D unit provides an 18 x 18 cm viewing area 
in a 20 x 20 cm package. Spot size in the stroke writing mode is 0.025 cm and a 
writing speed of 63,500 cm/sec provides the capability to portray the most complex of 
the OMS and EPDCS displays. These CRT displays operate at 40 frames/sec. to avoid 
perceived flicker. Stroke writing is done during the vertical retrace of the raster 
scan. The Sperry displays are built to provide sufficient brightness for operation in a 
10 fc ambient light environment and to withstand the vibration environment of 
commercial jet aircraft. A parallel program is developing a line of color CRT displays 
for use in tactical military aircraft. The CRT display is driven by a programmable 
symbol generator. The symbol generator can be programmed with respect to both 
symbology and color and provides an interface to the dedicated processor handling the 
schematic display. 

4.1.1.10 SCHEMATIC DISPLAY PROCESSOR AND MEMORY 

Generation and modification of the displays associated with the MFDCS controlled 
subsystems can require a considerable amount of processing capacity and memory 
depending on the number of systems controlled and number of different displays used. 
To offload the MFDCS control processor and memory, the schematic memory size and 
processor chosen will depend on the number of stored displays required. A number of 
processors are available as single board computers to interface to the MFDCS Multibus 
and both 8- or 16-bit microprocessor could be used. At this time a Z80 microprocessor 
with 64Kb of memory, would store a moderate number of displays. The displays w^uld 
be stored largely in vector format rather than on a pixel by pixel basis. In this way, 
only the end points, colors, character string locations and color fill regions need to be 
specified in display storage. The symbol generator then uses this information to 
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generate the display. In a similar fashion, the modifications to the stored displays 
based on system status or MFDCS control actions require the storage of only the 
change to the display rather than a complete display regeneration. 

4.1.1.11 LUMINANCE SENSING 

Luminance sensing is provided to permit automatic control of the display luminance 
under conditions of varying illumination. The output of a photodiode sensor is 
digitized and processed by the MFDCS softwa'e to define the luminance level 
commands sent to the displays. Figure 4.1-6 shows the luminance control curve to 
which the display luminance will be controlled. In this figure is the background 
luminance of the display with the pixels off and ALp is the perceived luminance where 
ALp is defined by ALp = Ls - L^. Ls is the measured on-pixel luminance. Figure 
4.1-6 is taken in large part from Reference 4-1. Also incorporated into the luminance 
control is a manual potentiometer to permit the operator to override the automatic 
control for optional display brightness. 

4.1.2 SOFTWARE DESIGN 

The software design divides the software into two major sections. The first is the 
Operating System which controls the background operation of the MFDCS and is 
independent of the data base. The data base (or bases) forms the second major 
software segment and is specific to a particular application or mission. By dividing 
the software in this way, the operating system need not be changed to adapt the 
MFDCS to different uses. 

4.1.2.1 OPERATING SYSTEM SOFTWARE 

The executive system software is stored in the MFDCS controller PROM and controls 
a number of software modules as shown in Figure 4.1-7. Upon power-up the MFK 
Controller performs a system initialization. The initialization includes the following 
areas: 
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1) Interrupt structure 

2) Baud rate timer 

3) Each serial and parallel port 

4) All system flags 

3) All sytem buffers 

Program control is passed to the system executive following initialization. The 
executive is responsible for sequencing through the system control modules. A 
particular control module is called by the executive if its control flag is set. This 
enables the controller to be event driven and thus respond in a real-time manner. In 
addition, all inputs and outputs are interrupt driven to ensure that no data or 
commands are lost. 

Each control module is concerned with a specific operation within the MFK operating 
system. The basic set of consol modules includes the following: 

Initialization 
Page Update 

Keyboard Legend Processing 
Display Processing 
Command Processing 
Keyboard Input/output 
GPC Input/output 
Non-GPC Interface Processing 
Display Output 
Luminance Processing 
Self -test 

The page update module interrogates each memory page that is called by the system 
for certain information. However, it must first decide what the next page is and then 
fetch that page. The nodule then updates the system information and queues the 
required control modules. For example, when called, it will look to see if the page 
contains any dicplcy information, if so, it notifies display pressing which will process 
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the information for display on the scratchpad. Keyboard legend processing updates 
each legend that the keyboard output routine send3 to the keyboard. This operation is 
always performed each time a switch is depressed by the operator. 

Command processing is also called when a switch is depressed. It looks at the current 
page to see if there are any special commands associated with the specific switch 
before passing control to the page update module. If a command is found for a switch, 
command processing queues the appropriate routines to handle the command. Often 
times this involves both outputs to the scratchpad display and the GPC. Command 
processing is also responsible for interpreting and executing any commands from the 
GPC. 

Luminance processing is concerned with monitoring the ambient light intensity and 
correcting the current switch display intensity for any change in the ambient light 
level. 

Th. keyboard inDut/output module is responsible ior maintaining the communications 
protocol with the keyboard switches This is true for the GPC input and output 
modules as well. The display outputs are basically simple output drivers. 

The non-GPC interface processing module is used to interface the MFDCS to the 
controls which do not pass through the GPC's to activate their control function. 

*.1.2.2 DATA BASE SOFTWARE 

The data base for the MFDCS is organized as a series of "pages". The pages are 
logically linked in hierarchical structure with a top level page leading to a number of 
second level pages. Pages below the top level can be linked to other pages of the same 
level, to higher level pages or to lower control level pages. The page format is shown 
in Figure 4.1-8. Words listed on the page have the following functions. 

1) Word 1 contains the address of the top level page. 


D 180-2721 SI 
76 


THE 


COMPANY 


I 





of r 


WORD 2 
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2) Word 2 instructs the MFDCS to anticipate a particular type of switch 
input. 

3) Words 4 and 5 provide information to the MFDCS on the display processing 
and location of display data. 

4) Switch legend pointers contains the addresses for the keyboard legends 
associated with this page. 

5) Switch next level vectors contain the addresses; of which, one will be 
selected to be the next page. The page selected is determined by the 
keyboard switch being depressed. 

6) Switch command pointers contain the addresses of the commands 
associated with this page. When a switch is depressed, the command 
selected by the switch number is sent to tl** host. 

This structure provides a standard format for each of the data bases being 
constructed. 

4.1.3 PACKAGING 

One of the objectives of the study was to fit the OM5 and EPDCS MFDCS into panel 
space on the simulator currently occupied by those systems. A detailed packaging 
analysis was not conducted as part of the study, however, the display elements were 
sized relative to the R1 panel. This panel would be the primary area freed for use by a 
change to the MFDCS configuration. A layout of the panel is shown schematically on 
Figure 4.1-9 based on known display package sizes. This location would minimize the 
electrical and mechanical changes to the remainder of the Orbiter systems since the 
panel presently contains controls and switches for the EPDCS. Panel area and depth 
should be sufficient to accept the MFDCS components. 

4.2 FUTURE OPTIONS 


Several areas of technology are not yet available for application to an Orbiter MFDCS 
but offer considerable promise in the near future. These anticipated advances are 
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primarily in the area of displays and controls. At the present time liquid crystal 
displays are being marketed for a variety of small size applications (e.g., watches, 
calculators and electronic games) with larger panels just starting to enter prototype 
production. LCD's are quite applicable to multifunction switches and the dichroic and 
phase change LCD's offer a good viewing angle range at very low power. The Orbiter 
operates as a "shirt-sleeve" environment for the crew so that the rather slow LCD 
response at low temperature should not be a problem. By lowering the power 
requirements, the heat sinking and cooling requirements would be less and the switch 
packages could be made much smaller. This change in packaging would permit an 
array of very flat switches to be formed into a multifunction keyboard with resultant 
savings in volume, weight and power. 

Similarly TFEi. displays oifer the potential for a sunlight readable solid state display 
which can be produced in volume at relatively low cost. Available resolution in TFEL 
panels is currently approaching that of CRPs and larger panel sizes are under 
development through the U.S. Army. A great potential advantage of TFEL panels is 
the possible construction of a full color flat panel device through the use of multiple 
phosphor layers with different doping. Development of this type of panel would enable 
the replacement of CRPs in the Orbiter display complement while saving additional 
weight and power. 

At this time, the goals of reducing Orbiter weight, power and cooling through the use 
of the MFDCS would require a more complete integration of the MFDCS into the 
Orbiter systems. In addition, the use of LCD or TFEL multifunction switches wuld be 
needed to reduce the high power requirements of the LED displays. As a minimal 
change add-on to the Orbiter, the package descried would add to the current weight, 
power and cooling required. 

4.3 FLEXIBILITY 

An important feature of an MFDCS is the capacity to adapt to new missions and/or 
new hardware configurations. The design presented provides considerable latitude in 
its ability to handle new data bases and display hardware. Changes in the data bar-c 
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are not restricted to redefinitions of switch legends, display redefinitions of switch 
legends, display formats or checklist and procedure contents. The MFDCS system can 
be reconfigured to control a completely different set of systems or to access the 
systems controlled through a completely different logic tree format. These features 
result from the separation between the background software operating system and the 
data base for the functions being displayed and controlled. 

Changes in the hardware configuration of the MFDCS are made easier by the modular 
structure of the operating system. For example, a change from an LED multifunction 
switch to a liquid crystal or thin film electoluminescent switch would not require 
changes in the remainder of the system with the exception of the power supply voltage 
and current changes pertinent to the new display. If the matrix size on the switch 
were changed, the changed display format will be accounted for by a change in the 
data base only. Changes in the number of the switches would require a change in the 
number of output ports addressed by the data base, however, this change would involve 
only the addition or deletion of input/output nodules to the basic MFDCS bus 
structure and the addition or de,etion of the appropriate I/O software. Similarly, a 
modification of one of the other displays would require only a change in the display, 
power supplies and the display's dedicated processing. 

These features in the MFDCS design also extend to memory additions necessary for 
changes in data base complexity. Memory can be added in 6*tK banks. 

By configuring the MFDCS in the modular fashion described, the system can adapt to 
both changes in display technology and to changes in the mission procedures or mission 
hardware. 
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5.0 ADDITIONAL MFDCS CONSIDERATIONS 

Several other areas, not directly involved in the present MFDCS design should be 
considered with respect to application of the MFDCS to the Orbiter. These ?*"eas 
include redundancy and reliability, automation and mission scenarios. 

5.1 RELIABILITY AND REDUNDANCY 

The recommended MFDCS concept provides several features that enhance reliability 
and support an extremely high fault tolerance level for flight critical applications. A 
MFDCS is, by definition, multipurpose and honce, assuming that several MFDCS's are 
incorporated into the Orbiter flight deck, functions usually performed on one MFDCS 
can be transferred to another if the first one fails. In some cases this may require 
backup display and control-label formats so that more than the usual number of 
functions can be combined into a single MFDCS. 

A second factor that contributes to high reliability is the organization of the MFDCS 
into several display and control modules. By designing the entire Orbiter flight deck 
around a small number of unique types of modules such as these, several of each type 
wil! be present. If any display or control module fails, the system can be reconfigured 
so that information display or control actions assigned to that module are mu.ed to a 
similar module in another area. Alternatively, if sufficient time is available, the 
failed module can be manually replaced by an identical unit from a lower priority area. 

The reconfiguration in response to failed display/control modules can be partially 
automated. Built-in-tests (BIT) and built-in-test-equipment (BITE) can be used to 
detec. failures and recommend particular reconfiguration schemes in response to 
particular failures and, upon operator concurrence, to automatically implement the 
reconfiguration. BIT and BITE can detect most but not all failures, so operator testing 
capability must be retained. In particular, the system must be designed so that 
potentially critical failures are immediately obvious to the operator. Control devices 
should provide feedback that the control hc« been moved, for example by tactile 
feedback, and that a signal from the control has reached the computer. The latter 
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feedback might be in the form of a change in the visual display. Similarly, critical 
displays must not fail in a mode in which they appear to be functioning normally even 
though new information required by the operator is not being displayed. 

5.2 AUTOMATION 

Automation in the Orbiter can be of considerable assistance in reducing crew 
workload, however, the experience base for deciding what functions should be 
automated is still quite limited. Thus, any automation program should include a high 
degree of flexibility with respect to changes in the functions automated and the level 
of automation implemented. The MFDCS provides this flexibility by incorporating 
automatic, semi-automatic or manual means of control. The automatic mode allows 
the system to accomplish an adequate level of crew support while permitting crew 
initiative and variation from predetermined procedures. The ability to use a variety of 
data bases offers a considerable range of increase or decrease in automation level. 

A number of automation designs are beginning to appear, however, they are usually 
specified in terms of the automation of one system. Boeing, for example, is currently 
working on the automated control of commercial and military aircraft electrical 
power systems. This effort includes features such as automatic load shedding and 
remote automated control of circuit breakers. Other examples of automation are 
automatic landing systems and navigation systems. The MFDCS can serve as a flexible 
test-bed for the investigation of automation in the various Orbiter systems. With a 
variety of data bases and mission scenarios, the implications of automation at varying 
levels of function control and under varying degrees of operator stress can be tested. 

5.3 MISSION SCENARIOS 

Adequate testing of the MFDCS will depend on developing mission scenarios which test 
its capabilities under all phases of Orbiter operation. This development will require 
close cooperation between personnel programming the MFDCS and the Orbiter crews. 
Data base development for the MFDCS can be a very time consuming and error-prone 
process if this sort of a liaison is not established. Experience in the development of 
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demonstrations and tests for the MFDCS design has shown the necessity for close and 
continuous cooperation between these groups if high efficiency is to be obtained from 
the MFDCS. 
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6.0 MFDCS DEVELOPMENT PROCESS 

Further development of the MFDCS and use in a simulator involve a number c: 
considerations. These include potential alternate uses for the system, the definition of 
the data base to be used in the system, the time frame over which the development 
program is to take place and the necessity for testing prior to incorporation of the 
system into the Orbiter simulator. 

6.1 POTENTIAL ALTERNATE USES 

The MFDCS design permits operation with a variety of data bases and is therefore 
applicable to a number of potential uses. Two oovious potential space applications are 
in the area of Orbiter payload management and as part of a work station associated 
with a manned space platform. The use of an MFDCS in Orbiter payload management 
offers the option of implementing an operational system without impacting as many 
other Orbiter systems. In addition, the payload variety could supply the opportunity to 
exercise the system for a wider range of potential requirements. 

Space platform development is an area where some form of MFDCS will be needed to 
minimize the hardware required for system monitoring. The MFDCS is designed to 
provide the capability for varying degrees of system automation and could act as a 
valuable tool in deciding the degree >f automation necessary or desirable in z manned 
platform environment. 

6.2 DATA BASE DEFINITION 

A major factor in the MFDCS development will be in the definition of the data base 
associated with the system. The use of automated systems is just coming into 
widespread use and the Orbiter is still quite limited in total flight test time. This is 
particularly true for the landing and takeoff phases of operation. The questions of 
what procedures to automate and what functions require the most rapid access will 
need to be resolved using simulation testing and a great deal of discussion between the 
users and the personnel developing software for the system. 
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6.3 DEVELOPMENT TIME FRAME 

The time frame over which the MFDCS will be developed determines to a significant 
extent, the options available in the development process. A short term plan to install 
an MFDCS in one of the Orbiter simulators within the next year will require rapid 
acquisition of the closest hardware available to flight qualified equipment and a rapid 
build-up of software programming liaison with designated users of the system. 
Development will also be constrained by the current usage of the simulation facilities. 
On the other hand, a longer development period could include a phase in which a 
preliminary engineering model is built using commercial equipment and a flexible 
format for design and packaging. This mode would permit use of the system for a 
variety of uses in addition to the Orbiter flight deck application. 

6.4 PRE- SIMULATION TESTING 

The principal costs in the MFDCS development will include the areas of flight 
qualification of components, integration with the present Orbiter systems and develop- 
ment of the software data base. As multifunction display and control technology 
advances, more flight qualified components will become available at reasonable cost. 
Similarly, if the software can be developed independently of the Orbiter simulators 
and tested for satisfactory operation of the access schema before integration begins, 
the tie-up of simulation time and hence expense can be reduced. Both funding 
considerations and time frame options indicate a development process in which the 
design is tested before an actual package destined for use in the present simulators is 
constructed. 
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